This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
File:                     RR75NZqYT2pM-R_pAE6usImphMA.mft (raw, json)
Hash identifier:          pdgsoHLCpkMPOdVaTPKvytjXQZcfL6IH9P/ak3y3Dtg=
Subject key identifier:   D2:28:D0:31:88:79:5D:A5:39:8B:B6:19:4C:48:13:51:2F:74:72:7E
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Certificate issuer:       /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial:       0E3C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
Manifest number:          0DC5
Signing time:             Sat 20 Dec 2025 10:10:53 +0000
Manifest this update:     Sat 20 Dec 2025 10:10:53 +0000
Manifest next update:     Mon 22 Dec 2025 10:10:53 +0000
Files and hashes:         1: CW3FD_TRmwzrR5Jpt7o0abja2JM.roa (hash: GlTKZP/hOiZTcp9R5UgObTobUqRvgQ62iUZSERW23PI=)
                          2: HIn29CGuAQNtrj9OXBhIijXsgBE.roa (hash: PcZYhGaMl/1BgPxPji5pTYLO5Gaswp9aGi2I5xIZSgc=)
                          3: RR75NZqYT2pM-R_pAE6usImphMA.crl (hash: BNuoHIH0jbj4a54cORZym9DPB1usipij1ZePK9H8hdY=)
                          4: VjDU2J7rmEn3_o9XZDDvUKAynYk.roa (hash: knJ2LltoiM/NmGRfnUGfd1y70/tR4qWdTRyPp/xwdRQ=)
                          5: Ztqj2vutrtxn91_xBwETU95khs4.roa (hash: YIU3Ann+HCAVJ2BsdytckBIw3NnX0kuthRii/YGQkoE=)
                          6: atUwJIKFrDyvVHD-_XMj0YDtvmI.roa (hash: SapC8vJuEGKRwGQlQcjqEo9/M2fJ6wGFGEG9eLaA+2I=)
                          7: lDXkCpHVcwy4jmBk1-5_Fgv0zCM.roa (hash: RvOTlLd/g2+74MOjMOGFkca9kSPWYkMR8fo0fSOYGMo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 20:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3644 (0xe3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
        Validity
            Not Before: Dec 20 10:10:53 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D228D03188795DA5398BB6194C4813512F74727E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2e:f7:a4:1c:54:16:63:3c:5d:6c:66:8b:c2:
                    bb:16:10:4a:c4:ab:96:08:10:8d:49:cb:9e:79:5a:
                    d6:02:eb:09:b6:0f:23:f8:1b:2f:00:9f:55:9a:80:
                    d6:a6:8d:bd:89:3a:39:d3:cc:fa:6d:29:81:75:5b:
                    26:e9:29:a9:31:d7:cc:3b:23:c9:70:9f:28:4b:99:
                    3d:04:25:85:9a:48:24:3a:e7:da:c4:52:f9:2b:c8:
                    90:75:97:c8:3d:a0:ef:e5:47:17:71:ed:bd:c1:13:
                    8a:1c:f9:29:1a:45:9b:ed:c9:88:77:3a:4a:db:03:
                    00:e8:dc:64:e6:ff:16:69:c7:63:db:f7:12:50:18:
                    bc:05:64:51:60:e3:e8:f9:58:10:cb:01:e1:29:7e:
                    4e:0e:cb:ec:10:98:d4:f6:de:9b:a7:89:6c:0b:f2:
                    50:a6:02:63:57:35:60:1b:f0:c0:c8:f5:69:f9:23:
                    dc:fe:9c:82:be:8b:1f:ca:a2:ac:30:be:54:3e:75:
                    d4:a4:51:7b:45:bd:0a:d8:8b:b7:d9:b5:07:87:8f:
                    86:f9:57:68:0b:20:bc:69:93:8b:06:1c:88:d1:1d:
                    50:11:93:02:e0:a3:e9:06:67:f5:41:91:8f:f8:1d:
                    46:67:78:58:9d:c9:82:f7:e9:3f:fd:b6:4c:c7:23:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:D0:31:88:79:5D:A5:39:8B:B6:19:4C:48:13:51:2F:74:72:7E
            X509v3 Authority Key Identifier:
                keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e6:b2:59:53:dd:f6:26:cb:fe:53:a1:64:c3:09:de:0f:b9:
         75:0e:1a:6f:2b:37:c7:f6:b6:5b:f4:4d:7d:4d:d0:47:fc:47:
         87:20:b8:ca:21:a4:57:30:a4:ba:8c:a0:95:79:c3:f9:91:65:
         c0:b2:be:0b:07:4a:d1:46:b7:20:e2:55:71:85:1e:a1:70:bd:
         67:eb:ba:16:90:e8:ed:dc:aa:54:3b:55:0b:e6:90:57:ac:5c:
         2e:fb:29:37:ec:09:04:16:74:fc:53:f8:43:b4:f0:84:0e:77:
         9c:2a:88:92:9e:ef:d6:15:c9:49:a8:e6:09:fb:56:db:4b:2e:
         17:64:8f:b2:04:fa:26:52:cf:45:8e:a0:46:c2:27:00:b7:58:
         56:5f:41:b0:91:ca:d3:84:b6:cb:b8:cc:9a:54:28:57:0b:5e:
         5b:70:ff:46:36:a0:67:11:9f:9d:a7:f6:d3:69:34:01:34:21:
         ff:3a:02:b4:0b:26:5d:de:ed:5f:5c:b8:12:50:5a:23:8c:45:
         b0:2f:3d:b5:d8:0e:4b:53:23:69:f8:27:f7:14:4d:c9:cb:7d:
         6e:cf:e6:4e:0b:10:fd:93:1e:73:91:97:04:f0:d7:8a:e5:8f:
         5b:cc:3c:29:76:90:ce:c4:23:74:93:b9:86:cb:ea:45:c9:d0:
         a3:5e:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:17:18 2025 by rpki-client